Customer instructions
Where StackScopes processes customer data to provide the service, processing is limited to the selected product scope, customer instructions, applicable contracts, and lawful obligations.
Safeguards
The product design includes tenant-aware boundaries, access control, encryption, auditability, data minimization, and separation between discovery and restricted execution.
Lifecycle
Collection, retention, export, deletion, backup, and support access should follow the applicable plan, configuration, contract, and verified operational policy.
International processing
Applicable hosting locations, subprocessors, transfer mechanisms, and jurisdiction-specific safeguards are documented through the customer agreement and current subprocessor schedule.